PivotAPI

insane windows

Hack The Box machine, insane difficulty, with 11 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Metadata and OSINT ▶ watch in the video
  2. AS-REP roasting ▶ watch in the video
  3. Hash cracking ▶ watch in the video
  4. SMB/NFS enumeration ▶ watch in the video

2. Lateral movement to user

  1. Reverse engineering ▶ watch in the video
  2. MSSQL abuse ▶ watch in the video
  3. Internal services and port forwarding ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. ACL abuse (BloodHound) ▶ watch in the video
  2. AV and EDR evasion ▶ watch in the video
  3. Reading LAPS passwords ▶ watch in the video
  4. Kerberos delegation (RBCD) ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →